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Sir: 

Transmitted herewith for filing is the original patent application of: 
Inventors: Craig H. Rowland 

For: METHOD AND SYSTEM FOR REDUCING THE FALSE 

ALARM RATE OF NETWORK INTRUSION DETECTION 
SYSTEMS 

Pursuant to 37 C.F.R. § 1.213(a), Applicants respectfully request that the 
above-identified patent application not be published under 35 U.S.C. § 122(b). 
Applicants hereby certify that the invention disclosed in the above-identified 
application has not been and will not be the subject of an application filed in 
another country, or under a multilateral international agreement, that requires 
•publication at eighteen months after filing. 

Enclosed are: 

(1) 23 pages of Specification, Claims and Abstract; 

(2) 3 pages of Executed Declaration and Power of Attorney; 

(3) 3 sheets of Formal Drawings; 

(4) 2 pages of an Assignment of the invention to Cisco Technology, Inc.; 

(5) 1 page of separate cover sheet in compliance with 37 C.F.R. § 3.28 
and § 3.31 is included with an Assignment recordal fee of $40.00 pursuant to 37 
C.F.R. § 1.21(h); 

(6) 2 pages of Information Disclosure Statement; 

(7) 1 page of US/PTO 1449 Form with copies of references cited (acco- 
bound); 

(8) 1 page Certificate of Mailing by Express Mail; 

(9) Nonpublication Request Under 35 U.S.C. § 122(b)(2)(B)(i); 

(10) 1 Baker Botts, LLP acknowledgement return postcard; and 

(11) This Transmittal Form with attached patent application filing fee. 
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FEE CALCULAT1 


ON 


FEE 




Number 




Number 
Extra 


Rate 


Basic Fee 
$ 770.00 


Total Claims 


21 


20 


1 


X$18 = 


18.00 


Independent 
Claims 


3 


3 


0 


X$86 = 


0.00 


TOTAL FILING FEE = 


$ 788.00 



Enclosed is a check in the amount of $ 788.00 for filing fee. Please charge 
any additional fees or credit any overpayment to Deposit Account No. 02-0384 of 
Baker Botts L.L.P. 



BAKER BOTTS L.L.P. 
Attorneys for Applicants 



Date: 
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PATENT APPLICATION 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re Application of: Craig H. Rowland 

Date Filed: October 15, 2003 

Title: METHOD AND SYSTEM FOR REDUCING THE FALSE 

ALARM RATE OF NETWORK INTRUSION 
DETECTION SYSTEMS 



MAIL STOP PATENT APPLICATION 

Commissioner for Patents 

P.O. Box 1450 

Alexandria, VA 22313-1450 



Dear Sir: 

CERTIFICATE OF MAILING BY EXPRESS MAIL 
I hereby certify that the attached Patent Application (23 pages, including 
Specification, 21 Claims, and Abstract), Formal Drawings (3 sheets), combined Declaration 
and Power of Attorney (3 pages), Assignment of the invention to Cisco Technologies (2 
pages), separate Recordation Coversheet (1 page), check in the amount of $40.00 to satisfy 
Recordal Fee, Information Disclosure Statement (2 pages), with attached US/PTO Form 1449 
(1 page), copies of references cited (acco-bound), Non-Publication Request (1 page), 
Application Transmittal with fees calculated (2 pages), a check in the amount of $788.00 for 
the application filing fee, this Certificate of Mailing, and an acknowledgment postcard are 
being deposited with the United States Postal Service "Express Mail Post Office to 
Addressee" service under 37 C.F.R. § 1.10 on this 15th day of October, 2003 and is addressed 
to Assistant Commissioner of Patents, P.O. Box 1450, Alexandria, VA 22313-1450. 

Willie Jiles 

Express Mail Receipt 

No. EV 323509608 US 

Attorney Docket No. 06289 1 . 1 1 66 

EV3235CHkj[]flUS 
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PTO/SB/35 (11-00) 
Approved for use through 10/31/2002. OMB 0651-0031 
U.S. Patent and Trademark Office; U. S. DEPARTMENT OF COMMERCE 



NONPUBLICATION REQUEST 
UNDER 

35 U.S.C. 122(b)(2)(B)(i) 


First Named Inventor 


Craig H. Rowland 


Title 


Method and System for Reducing the False 
Alarm Rate of Network Intrusion Detection 
Systems 


Atty Docket Number 


062891.1166 



I hereby certify that the invention disclosed in the attached application has not and 
will not be the subject of an application filed in another country, or under a multilateral 
agreement, that requires publication at eighteen months after filing. 



I hereby request that the attached application not be published under 35 
U.S.C. 122(b). 



BAKER BOTTS L.L.P. 



Attorne 



date ( 



)licants 













6igrtature 



V Bartdd 


IE 


Bhowalter 






Inted name 



Reg No. 38,302 



This request must be signed in compliance with 37 CFR 1.33(b) and submitted with the 
application upon filing. 



Applicant may rescind this nonpublication request at any time. If applicant rescinds a 
request that an application not be published under 35 U.S.C. 122(b), the application 
will be scheduled for publication at eighteen months from the earliest claimed filing 
date for which a benefit is claimed. 

If applicant subsequently files an application directed to the invention disclosed in the 
attached application in another country, or under a multilateral international agreement, 
that requires publication of applications eighteen months after filing, the applicant must 
notify the United States Patent and Trademark Office of such filing within forty-five (45) 
days after the date of the filing of such foreign or international application. Failure to 
do so will result in abandonment of this application (35 U.S.C. 122(b)(2)(B)(iii)). 

Burden Hour Statement: This collection of information is required by 37 CFR 1.213(a). The information is used by the public to request that an application not be 
published under 35 U.S.C. 122(b) (and the PTO to process that request). Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This form is estimated to 
take 6 minutes to complete. This time will vary depending upon the needs of the individual case. Any comments on the amount of time you are required to 
complete this form should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, Washington, DC 20231. DO NOT SEND FEES OR 
COMPLETED FORMS TO THIS ADDRESS. SEND TO: Assistant Commissioner for Patents, Washington, DC 20231 . 
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